PT-2018-11049 · Intel · Intel Distribution For Python

Publicado 2018-09-12 · Atualizado 2019-10-03 · CVE-2018-12175

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Distribution for Python (IDP) version 2018

Description The issue concerns default install directory permissions in Intel Distribution for Python, which may allow an unprivileged user to escalate privileges via local access.

Recommendations For Intel Distribution for Python (IDP) version 2018, consider changing the default install directory permissions to prevent unprivileged users from escalating privileges. As a temporary workaround, restrict local access to the install directory until a fix is available.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2018-12175

Produtos afetados

Intel Distribution For Python

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-12175 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12175 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00181.html · Aviso do Fabricante